PicaJet FX Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in PicaJet FX version 2.6.5. This vulnerability allows local attackers to crash the application by entering oversized input into registration fields. Specifically, a 6000-byte buffer can be pasted into the 'Registration Name' and 'Registration Key' fields through the 'Help' menu's 'Register PicaJet' dialog, leading to an application crash.

Impact

Exploitation of this vulnerability causes the application to crash, disrupting any ongoing tasks or processes within PicaJet FX.

Reproduction

To reproduce this vulnerability, first create a text file named 'exploit.txt' and write a 6000-byte buffer into it. After saving the file, open PicaJet FX and navigate to the 'Help' menu. Select 'Register PicaJet...' and paste the contents of 'exploit.txt' into the 'Registration Name' and 'Registration Key' fields. Click 'OK' to trigger the application crash.